Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/B9AD57AA6EAD11F1B44FDC1A61A30FBC.roa
File: B9AD57AA6EAD11F1B44FDC1A61A30FBC.roa (raw, json)
Hash identifier: AUfJaovcB3PAbYqKP58M+4Byc1p1y6kPusDvqlIOieU=
Subject key identifier: 3B:02:E5:C6:0D:ED:F0:04:8B:B1:68:85:A9:E4:49:77:53:D3:38:52
Certificate issuer: /CN=A913089B/serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Certificate serial: C9
Authority key identifier: 9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/B9AD57AA6EAD11F1B44FDC1A61A30FBC.roa
Signing time: Tue 23 Jun 2026 04:03:59 +0000
ROA not before: Tue 23 Jun 2026 04:03:59 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 62325
IP address blocks: 179.252.64.0/20 maxlen: 24
179.254.0.0/20 maxlen: 24
186.241.32.0/19 maxlen: 24
186.241.144.0/20 maxlen: 24
186.242.224.0/19 maxlen: 24
186.244.0.0/20 maxlen: 24
186.244.32.0/19 maxlen: 24
186.244.64.0/19 maxlen: 24
186.247.112.0/20 maxlen: 24
186.247.144.0/20 maxlen: 24
187.5.160.0/20 maxlen: 24
187.14.0.0/19 maxlen: 24
187.40.96.0/19 maxlen: 24
189.49.0.0/18 maxlen: 24
189.72.224.0/20 maxlen: 24
189.73.64.0/19 maxlen: 24
189.73.160.0/19 maxlen: 24
189.73.208.0/20 maxlen: 24
189.74.32.0/19 maxlen: 24
189.74.64.0/20 maxlen: 24
189.74.192.0/19 maxlen: 24
189.75.240.0/20 maxlen: 24
191.217.64.0/20 maxlen: 24
191.218.192.0/18 maxlen: 24
191.219.32.0/19 maxlen: 24
191.219.96.0/19 maxlen: 24
191.219.160.0/20 maxlen: 24
191.223.96.0/19 maxlen: 24
191.223.240.0/20 maxlen: 24
200.97.192.0/18 maxlen: 24
200.102.208.0/20 maxlen: 24
200.102.224.0/20 maxlen: 24
200.103.80.0/20 maxlen: 24
200.103.160.0/20 maxlen: 24
200.103.192.0/19 maxlen: 24
200.219.64.0/20 maxlen: 24
200.219.96.0/19 maxlen: 24
200.222.160.0/19 maxlen: 24
200.234.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl
rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913089B, serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Validity
Not Before: Jun 23 04:03:59 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a3a05ae-dee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:94:88:be:1a:72:33:75:f8:87:f4:41:66:
19:69:8c:63:a9:c7:dd:e9:ef:4d:6f:b3:fb:fe:82:
01:8d:8f:93:d1:72:20:17:69:5f:fa:95:5c:37:4a:
8a:5e:43:4c:71:61:0c:9d:3f:8c:28:36:57:56:65:
39:66:54:62:d9:46:cb:8f:9d:eb:0b:a7:c9:a4:b4:
06:7d:59:99:03:91:c9:60:50:23:59:de:71:1b:4a:
86:0e:6b:e7:74:da:32:43:e1:d1:5e:76:73:1a:f8:
2f:f4:7b:6b:9b:0d:f7:78:8a:12:74:1f:65:f9:fb:
5c:99:4b:4c:8f:98:4f:10:87:52:53:a0:a1:87:68:
22:8d:73:9c:16:9a:78:32:14:07:c0:93:f4:6d:4f:
0f:53:98:bb:97:07:57:27:ee:ac:84:42:43:ea:eb:
fe:ae:4a:5a:34:a3:60:7e:cc:aa:16:ce:dd:2a:3d:
81:b7:39:4a:49:65:44:08:e3:81:bf:21:5c:90:62:
36:fc:20:b6:7d:02:e3:c3:2b:88:8d:8b:87:cf:63:
cf:19:82:ca:54:45:3a:5b:75:b7:f3:14:3d:f2:67:
77:4b:27:44:6c:0e:3b:2e:e1:7c:90:93:7b:7e:56:
8d:e9:03:60:d3:b8:ee:f7:91:65:8a:38:18:a9:47:
72:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:02:E5:C6:0D:ED:F0:04:8B:B1:68:85:A9:E4:49:77:53:D3:38:52
X509v3 Authority Key Identifier:
keyid:9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/B9AD57AA6EAD11F1B44FDC1A61A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
179.252.64.0/20
179.254.0.0/20
186.241.32.0/19
186.241.144.0/20
186.242.224.0/19
186.244.0.0/20
186.244.32.0-186.244.95.255
186.247.112.0/20
186.247.144.0/20
187.5.160.0/20
187.14.0.0/19
187.40.96.0/19
189.49.0.0/18
189.72.224.0/20
189.73.64.0/19
189.73.160.0/19
189.73.208.0/20
189.74.32.0-189.74.79.255
189.74.192.0/19
189.75.240.0/20
191.217.64.0/20
191.218.192.0/18
191.219.32.0/19
191.219.96.0/19
191.219.160.0/20
191.223.96.0/19
191.223.240.0/20
200.97.192.0/18
200.102.208.0-200.102.239.255
200.103.80.0/20
200.103.160.0/20
200.103.192.0/19
200.219.64.0/20
200.219.96.0/19
200.222.160.0/19
200.234.16.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:a7:4f:28:d1:b5:00:b3:01:3f:d9:67:28:84:44:64:7c:97:
4e:45:75:bd:17:78:c1:50:d1:6a:62:4a:7c:4f:19:3d:30:6a:
94:52:ca:f9:98:cf:a0:17:68:df:18:1b:f7:6c:f1:8e:ce:23:
db:f3:30:cf:30:e3:0b:f1:70:30:85:d2:9f:50:5e:fe:0b:ef:
b1:d3:01:6d:44:c5:8c:52:00:14:33:a4:a5:85:15:65:4d:1c:
57:71:2b:21:9b:6f:88:34:1f:79:86:39:80:27:54:bf:b3:0b:
85:3c:62:6f:01:ea:4c:b4:40:6f:e7:2b:6c:41:eb:5f:96:a6:
38:a3:6b:a0:8f:71:b4:7f:f8:5d:b2:82:2b:6f:33:20:80:db:
8e:23:08:65:39:01:3d:1f:03:0e:6f:9c:6c:31:99:ce:ec:3e:
02:f0:05:43:09:9a:c3:4c:29:61:0d:e7:58:10:42:e1:68:72:
d3:4e:8e:65:67:30:be:0e:13:c5:af:07:83:69:6f:86:2e:0f:
eb:d9:6f:aa:5c:5a:ba:d6:4e:76:83:c4:fe:78:47:e5:2f:f9:
06:bd:b2:f9:20:60:29:f1:d9:c6:41:6c:af:53:74:f5:91:df:
81:e6:fe:40:32:af:fc:e4:38:c7:6b:ee:a8:e5:54:c2:8a:d0:
f9:89:c3:83
-----BEGIN CERTIFICATE-----
MIIGLDCCBRSgAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA4OUIxMTAvBgNVBAUTKDlCQzQ4REFDMTAwRTc1NEVFOEUxQ0E2QUJBOTQyNEUz
M0QzNURFNkEwHhcNMjYwNjIzMDQwMzU5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTNhMDVhZS1kZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr8OUiL4acjN1+If0QWYZaYxjqcfd6e9Nb7P7/oIBjY+T0XIgF2lf+pVcN0qK
XkNMcWEMnT+MKDZXVmU5ZlRi2UbLj53rC6fJpLQGfVmZA5HJYFAjWd5xG0qGDmvn
dNoyQ+HRXnZzGvgv9Htrmw33eIoSdB9l+ftcmUtMj5hPEIdSU6Chh2gijXOcFpp4
MhQHwJP0bU8PU5i7lwdXJ+6shEJD6uv+rkpaNKNgfsyqFs7dKj2BtzlKSWVECOOB
vyFckGI2/CC2fQLjwyuIjYuHz2PPGYLKVEU6W3W38xQ98md3SydEbA47LuF8kJN7
flaN6QNg07ju95FlijgYqUdyswIDAQABo4IDUDCCA0wwHQYDVR0OBBYEFDsC5cYN
7fAEi7FohankSXdT0zhSMB8GA1UdIwQYMBaAFJvEjawQDnVO6OHKarqUJOM9Nd5q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDg5Qi9ENTRBMkUzRTAw
Q0IxMUYxQkY3NDkxMDM4RUVFNTI4RS9tOFNOckJBT2RVN280Y3BxdXBRazR6MDEz
bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy
RkQxRkYyL204U05yQkFPZFU3bzRjcHF1cFFrNHowMTNtby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA4OUIvRDU0QTJFM0UwMENCMTFGMUJGNzQ5MTAzOEVFRTUyOEUvQjlBRDU3QUE2
RUFEMTFGMUI0NEZEQzFBNjFBMzBGQkMucm9hMIIBDQYIKwYBBQUHAQcBAf8Egf0w
gfowgfcEAgABMIHwAwQEs/xAAwQEs/4AAwQFuvEgAwQEuvGQAwQFuvLgAwQEuvQA
MAwDBAW69CADBAW69EADBAS693ADBAS695ADBAS7BaADBAW7DgADBAW7KGADBAa9
MQADBAS9SOADBAW9SUADBAW9SaADBAS9SdAwDAMEBb1KIAMEBL1KQAMEBb1KwAME
BL1L8AMEBL/ZQAMEBr/awAMEBb/bIAMEBb/bYAMEBL/boAMEBb/fYAMEBL/f8AME
BshhwDAMAwQEyGbQAwQEyGbgAwQEyGdQAwQEyGegAwQFyGfAAwQEyNtAAwQFyNtg
AwQFyN6gAwQEyOoQMA0GCSqGSIb3DQEBCwUAA4IBAQCmp08o0bUAswE/2WcohERk
fJdORXW9F3jBUNFqYkp8Txk9MGqUUsr5mM+gF2jfGBv3bPGOziPb8zDPMOML8XAw
hdKfUF7+C++x0wFtRMWMUgAUM6SlhRVlTRxXcSshm2+INB95hjmAJ1S/swuFPGJv
AepMtEBv5ytsQetflqY4o2ugj3G0f/hdsoIrbzMggNuOIwhlOQE9HwMOb5xsMZnO
7D4C8AVDCZrDTClhDedYEELhaHLTTo5lZzC+DhPFrweDaW+GLg/r2W+qXFq61k52
g8T+eEflL/kGvbL5IGAp8dnGQWyvU3T1kd+B5v5AMq/85DjHa+6o5VTCitD5icOD
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:53 2026 by rpki-client